National security month
Every October, digital security jumps to the top of the calendar in Norwegian organisations. Here's the history behind security month, and how to get the most out of it.
Where does security month come from?
The idea came from the US, where October has been the national cybersecurity awareness month since 2004. Europe followed in 2012, when the EU's security agency ENISA ran the very first European Cybersecurity Month as a pilot across eight countries. Norway was in from the start.
At home, Nasjonal sikkerhetsmåned has been organised every October since 2011, coordinated by NorSIS on behalf of the Ministry of Justice and Public Security, since 2024 as part of the Norwegian National Security Authority (NSM). The goal has stayed the same throughout: less fear, more knowledge. Concrete tools for leaders, employees and everyone else, not another scare campaign.
- 2004The US makes October security month
- 2011First Norwegian security month, run by NorSIS
- 2012ENISA runs a European pilot in eight countries, Norway included
What happens in practice?
Courses, talks, phishing drills and campaigns across the country. Some organisations set aside fifteen minutes at lunch, others use the whole month. The format matters less than the topic actually making it into the calendar.
The reason is simple: most successful attacks still start with a person being tricked, not a machine being "hacked". One good hour in October can be the difference between an employee who clicks, and one who stops.
My October
October is my busiest month. I travel to schools, companies and conferences with talks on digital security: entertaining enough that people listen, concrete enough that they change habits the next day. The dates tend to fill up before summer is over.
Marking security month this year?
Book a talk for October: pick a date, tell me about the audience, and I'll reply the same day.